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(57) Abstract: The invention relates to a method and system for verifying the authenticity of one or more goods (1), each good 
(1) having at least one associated uscr-exposable code (2). The system comprises at least one authentication server (15) arranged to 
have access to unique codes for authentic goods and to verify said user-exposable code (2). A user device (13,14) is connected to 
said authentication server (15) via a data transmission network (11). A user of a user device (13,14) may transmit the user-exposable 
code (2) and an exposure state of said user-exposable code (2) to said authentication server (15). The authentication server (15) is 
arranged to determine the authenticity of said good (1) in dependence on said user-exposable code (2) and said exposure state. By 
considering the exposure state of the user-exposable code (2), counterfeit goods are more reliably identified. 
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Method and system for verifying the authenticity of goods 

The invention relates to a method and system for 
verifying the authenticity of goods. 

In recent years, a considerable need has been recog- 
nized for anti-counterf eiting methods and systems for use on a 
5 variety of articles or goods. Many of these methods and sys- 
tems rely on special product features. However, an approach 
wherein the complexity of features goods is increased will 
only work for a limited period of time, as the large profits 
from counterfeiting gives counterfeiters access to advanced 

10 resources. Moreover, complex features are not always appreci- 
ated by customers and may require advanced education or 
knowledge of these customers. Further, such an approach raises 
manufacturing costs. Authenticity of products is particularly 
relevant for valuable items, items with a reputation of qual- 

15 ity or products for which the quality is critical. Examples of 
such goods comprise jewellery, proprietary products, pharma- 
ceutical products or spare parts for e.g. cars. Further such 
methods and systems may be useful for products with a weak 
distribution control. 

20 WO 99/04364 discloses a method and system for verify- 

ing the authenticity of goods by marking these goods with 
random numbers and providing users with access to a database 
with codes of authentic goods. Comparing means are provided to 
compare the random number of a good with the codes in the da- 

25 tabase in order to verify the authenticity of the goods. If 

the database indicates that the code has previously been used, 
it is indicated to the user that the code is a duplicate, be- 
ing evidence of illegal counterfeiting. 

A disadvantage of this method and system is, inter 

30 alia, that such an approach still allows counterfeiting. The 
numbers attached to the goods may e.g. be copied from the 
products and attached to counterfeited goods. If the copied 
number is verified at the database before the original number, 
the consumer of the original good is wrongly informed that his 

35 good is forged if he checks the authenticity afterwards. If 
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bar codes are used, the consumer needs a scanner or code 
reader to verify the authenticity of the goods. 

It is an object of the invention to provide an im- 
proved method and system for verifying the authenticity of 
5 goods . 

This object is achieved by providing a method for 
verifying the authenticity of one or more goods, each good 
having at least one associated user-exposable code, in a sys- 
tem comprising at least one authentication server at least 
10 arranged to have access to unique codes for authentic goods 

and to verify said user-exposable code, and at least one user 
device connectable to said authentication server via a data 
transmission network, comprising the steps of: 

receiving one or more data-strings comprising said user- 
15 exposable code and an exposure state of said user- 

exposable code at said authentication server; 
- determining the authenticity of said good in dependence 
on said user-exposable code and said exposure state. 

This object is further achieved by providing a system 
20 for verifying the authenticity of one or more goods, each hav- 
ing at least one associated user-exposable code, comprising at 
least one authentication server arranged to have access to 
unique codes for authentic goods and to verify said user- 
exposable code and at least one user device connectable to 
25 said authentication server via a data transmission network, 

said authentication server being arranged to determine the au- 
thenticity of said good in dependence on said user-exposable 
code and said exposure state. 

By providing the goods with non-exposed codes that 
3 0 can be exposed by the user or consumer of the goods, chances 
of illegal copying of codes in stores or at other stages in 
the production and distribution process, are significantly re- 
duced. Further by considering the exposure state of the code 
in the authenticity verification process, chances of abuse- are 
35 further reduced. The user can establish the authenticity of 

the good prior to using it. The system is self-explanatory and 
therefore simple for the user. 
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In a particularly advantageous embodiment of the in- 
vention, the method comprises the steps of: 

if said user-exposable code does not match with said 
unique codes, transmitting at least a first non- 
5 authenticity message to said user device; 

- or else, determining whether said user-exposable code has 
previously been received; 

- and, if said user-exposable code has not previously been 
received, transmitting a first authenticity message to 

10 said user device; 

- or else, providing a query on said user device relating 
to said exposure state; 

- receiving in response to said query said one or more 
data-strings comprising said exposure state at said au- 

15 thentication server; 

- transmitting a second non-authenticity message or a sec- 
ond authenticity message to said user device, depending 
on said exposure state. 

Contrary to the prior art, the fact that a code was 

20 previously used does not necessarily result in a non- 
authenticity message. Instead a further query is presented to 
the user to establish the exposure state, e.g. evaluating 
whether the originally non-exposed code was exposed by the 
user himself. If the user did expose the code himself while 

25 the code has already been received and/or checked, there is a 
good chance counterfeiters have exposed original codes and 
covered these or copied codes again, indicating that a forged 
article is at stake. In this case a non-authenticity message 
reading e.g. "this product is probably fake" or "this code is 

30 suspect" is presented to the user. If the good of the user has 
attached an already exposed code, probably a genuine product 
is resold. Accordingly an authenticity message is presented to 
the user, reading e.g. "this product is probably genuine". It 
should be appreciated that the order of the steps is irrele- 

35 vant as long as this effect is achieved. 

The exposure state may also relate to other charac- 
teristics of the code, e.g. the environmental circumstances 
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wherein the code is readable. It may e.g. be so that after ex- 
posure of the code, the code becomes unreadable after a 
particular period of time and may only be made visible once 
more by heating the label. In such a case, the exposure state 
5 relates to how the code was made visible again. 

It is noted that the method and system for verifying 
the authenticity of goods may be combined with other measures 
to distinguish counterfeited and authentic goods. 

The invention further relates to a computer program 
10 product with computer executable code portions for performing 
the method and to an authentication server arranged to perform 
this method. 

Some further embodiments of the invention are pre- 
sented in the dependent claims and described in more detail 
15 below. 

The invention will be further illustrated with refer- 
ence to the attached drawings, which schematically show a 
preferred embodiment according to the invention. It will be 
understood that the invention is not in any way restricted to 
20 this specific and preferred embodiment. 
In the drawings: 

Figs. 1A and IB respectively show a good with a non- 
exposed code and an exposed code; 

Fig. 2 shows a system for verifying the authenticity 

2 5 of goods according to an embodiment of the invention, and 

Fig. 3 shows a flow chart for a part of the method 
for verifying the authenticity of goods according to an em- 
bodiment of the invention. 

Figs. 1A and IB show a good, article, product or item 
30 1, such as jewellery, a mobile phone, a theatre ticket or a 
pharmaceutical product. The good 1 has an associated user- 
exposable code 2, that is covered by a code cover 3 in Fig. 1A 
and exposed, i.e. the cover is removed, in Fig. IB. The cover 
may e.g. be removed by peeling off the cover or by scratching 

3 5 it away. Preferably, the cover 3 cannot easily be reattached 

over the code 2. The code may be attached to the product in 
various ways, such as by means of labels, tags or stickers. 
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Alternatively the code 2 may be applied directly to the prod- 
uct, e.g. by printing or engraving, thereby reducing the 
chance that the good 1 and code 2 are separated. 

It is noted that the good 1 may have multiple codes 2 
5 that are e.g. applied on top of each other, such that only a 
single code cover 3 is required. In that case the codes 2 may 
e.g. be applied on stickers that can be removed by different 
users in a distribution chain in order to verify the authen- 
ticity of the good 1. 

10 The label, tag, sticker or good itself further com- 

prises an address 4 for verifying the authenticity over a data 
transmission network as will be described below. The label, 
tag, sticker or good itself may further comprise information 
on the manner in which one should proceed to verify the au- 

15 thenticity. The user should e.g. be prompted to remove the 
code cover 3 . 

Codes 2 or batches of such codes can be sold to par- 
ties having interests in reducing counterfeiting in one or 
more markets, such a manufacturers of distributors of pharma- 

20 ceutical products. 

Fig. 2 shows a system 10 for verifying the authentic- 
ity of one or more goods 1, wherein each good 1 has at least 
one user-exposable code 2, as was shown in Figs 1A and IB. 

The system 10 comprises a data transmission network 

25 11 comprising a wired data transmission network 11A, such as 
e.g. the internet, and a wireless data transmission network 
11B that is communicatively connected to the wired network 11A 
via a gateway 12. The system 10 comprises a first user device 
13, e.g. a computer arrangement, and a second user device 14, 

30 e.g. a mobile phone. Further the system 10 comprises an au- 
thentication server 15 communicatively connected with network 
11 and having access to a database 16, comparing means 17, a 
counter 18 and a query generator 19. The database 16 comprises 
unique codes identifying authentic goods 1. Measures are taken 

35 to avoid hacking of the database 16. 

The operation of the system 10 displayed in Fig. 2 is 
described with reference to Fig. 3 illustrating an embodiment 
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of the method for verifying the authenticity of goods 1 ac- 
cording to the invention. 

In 21 a data-string is received from the user device 
14 over the data transmission network 11 at the authentication 
5 server 15. The data-string comprises the user-exposable code 
2, e.g. 12345 67890 00141, of the good 1. The code preferably 
has over ten positions to enhance the scalability of the 
method and system and to minimize chances of guessing correct 
codes. This feature can be further enhanced by employing al- 
io phanumeric codes, which is a preferred embodiment of the 
invention. 

As the code can be transmitted wirelessly, the user 
may check the authenticity of the good 1 at the purchase 
point. The code is entered on a web page with the address pro- 

15 vided on or with the good 1 and is e.g. a URL. A URL is always 
unique and cannot therefore reasonably be duplicated thereby 
enhancing the safety of the system. 

In 22, the authentication server 15 may provide a 
confirmation query at the user device 14 to check whether the 

2 0 code entered by the user is correct. If the code is incorrect, 
the user is requested to enter the correct code; else the user 
confirms that he entered the correct code and the method pro- 
ceeds to 23. This confirmation procedure reduces the chance of 
incorrect assessment of the authenticity of the good 1. 

25 in 23 the comparing means 17 of the authentication 

server 15 compares the received code 2 with the unique codes 
for authentic goods 1 in the database 16. If the received code 
2 does not match a unique code of the database 16, a first 
non-authenticity message 24 is transmitted to the user device 

30 14. Accordingly it is determined that the good 1 is not au- 
thentic. Subsequently further information can be gathered on 
the good 1 at 2 5 , e.g. by transmitting further queries to the 
user device 14, to identify and flag a counterfeit at 26. This 
further information provides valuable intelligence of these 

35 illegal activity. 

If the received code 2 matches with a unique code for 
an authentic good 1 of the database 16, in 27 it is determined 
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whether the code 2 was received previously. If the code 2 is 
received for the first time, a first authenticity message 28 
is transmitted to the user device 14. Accordingly it is estab- 
lished that the good 1 to which the code 2 is associated is an 
5 authentic good. In 29 further information can be provided for 
the user. 

If it is determined in 27 that the code 2 has been 
received previously, the query generator 19 may provide a 
query 3 0 relating to the exposure state of the user-exposable 
10 code 2. The query may e.g. read: "did you expose this code 
yourself?" . 

If the response to the query 3 0 is negative ("no") an 
authenticity message 31 is transmitted to the user device 14. 
The authenticity message 31 may e.g. read: "This product is 

15 probably genuine" . In 32 alternative verification may be ap- 
plied, wherein the user may be guided through the alternative 
verification route. As an example, the label or tag may com- 
prise unique other features to which the user can be pointed 
and queried. The user may e.g. be asked to provide information 

20 on certain characteristics of a hologram provided on the la- 
bel. Again further information can be provided to the user 
device 14 in 33. 

If the response to the query 30 is positive ("yes"), 
a non- authenticity message 34 is transmitted to the user de- 

25 vice 14. The non-authenticity message 34 may e.g. read: "This 
product is probably fake". In such a case the code 2 may e.g. 
have been copied or covered again. Subsequently further in- 
formation can be gathered on the good 1 at 35, e.g. by 
transmitting further queries to the user device 14, to iden- 

30 tify and flag a counterfeit at 36. This further information 
provides valuable intelligence of these illegal activity. 

It should be appreciated that further steps may be 
added to the method or steps may be performed in a different 
sequence. An example of a further step is the provision of the 

35 counter 18 allowing not only the determination of whether the 
code 2 was previously received but also the determination of 
the actual number of times the code 2 was received. The method 
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may thus further involve the definition of a threshold for the 
number of times a code is received and performing an appropri- 
ate action is such a threshold is achieved or exceeded. If 
e.g. the code 2 of a good 1 is received more than three times 
at the authentication server 15, the alternative verification 
32 may be more detailed. Another modification of the method 
involves the input at the user device 13, 14 and receipt of 
the user-exposable code 2 as well as the exposure state at the 
authentication server 15 in step 21, i.e. the query 30 is made 
independent of the fact whether the code 2 was received be- 
fore. In this case only a single input, involving both the 
code 2 and the exposure state, is necessary at the user device 
13, 14. Other modifications or combinations of steps can be 
envisaged as well. The system provides a source for valuable 
information on both legal and illegal activities. The system 
establishes a direct contact with the end-user of the good 1 
which can be valuable for other commercial purposes, such as 
advertising or updates. Illegal goods can be traced. 
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CLAIMS 



1. Method for verifying the authenticity of one or 
more goods (1) , each good (1) having at least one associated 
user-exposable code (2), in a system (10) comprising at least 
one authentication server (15) at least arranged to have ac- 
cess to unique codes for authentic goods and to verify said 
user-exposable code (2), and at least one user device (13,14) 
connectable to said authentication server (15) via a data 
transmission network (11), comprising the steps of: 

- receiving one or more data-strings comprising said user- 
exposable code (2) and an exposure state of said user- 
exposable code (2) at said authentication server (15); 

- determining the authenticity of said good (1) in depend- 
ence on said user-exposable code (2) and said exposure 



of 



state . 

2. Method according to claim 1, comprising the steps 



if said user-exposable code (2) does not match with said 
unique codes, transmitting at least a first non- 
authenticity message (24) to said user device (13,14); 

- or else, determining (27) whether said user-exposable 
code (2) has previously been received; 

- and, if said user-exposable code has not previously been 
received, transmitting a first authenticity message (28) 
to said user device (13,14); 

- or else, providing a query (30) on said user device 
(13,14) relating to said exposure state; 

- receiving in response to said query (30) one or more of 
said data-strings comprising said exposure state at said 
authentication server; 

- transmitting a second authenticity message (31) or a sec- 
ond non-authenticity message (34) to said user device 
(13,14), depending on said exposure state. 

3. Method according to claim 1 or 2 , wherein said 
query (30) evaluates whether said user-exposable code (2) was 
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exposed by the user of said good (1) and, if a positive re- 
sponse is received, transmitting said second non-authenticity 
message (34) , or else, transmitting said second authenticity 
message (31) . 

5 4 . Method according to one or more of the preceding 

claims, wherein said method further comprises the step of 
counting the number of times said user -exposable code (2) is 
received. 

5. Method according to claim 4, wherein a threshold 
10 is defined for the number of times said user-exposable code 

(2) is received and, if said threshold is reached or exceeded, 
one or more alternative verification steps (32) are triggered. 

6 . Method according to one or more of the preceding 
claims, wherein said method further comprises the steps of: 

15 - providing a confirmation query (22) on said user device 

(13,14) relating to the correctness of said received 

user-exposable code (2) ; 
- checking (23) said user-exposable code (2) against said 

unique codes only after receiving a confirmation message 
20 from said user device (13,14) confirming the correctness 

of said user-exposable code (2) . 

7. Method according to one or more of the preceding 
claims, wherein said good (1) further comprises an access ad- 
dress of said authentication server (15) , enabling a user to 

25 verify the authenticity of said good (1) over said data trans- 
mission network (11) . 

8 . Method according to one or more of the preceding 
claims, wherein a plurality of codes (2) is associated with 
said good (1) and said authentication server (15) receives 

30 said codes (2) from a plurality of users in a distribution 
channel and compares said codes (2) with said unique codes. 

9. Method according to one or more of the preceding 
claims, wherein said users expose said one or more user- 
exposable codes (2) by peeling off or scratching away a code 

3 5 cover (3) . 

10. Method according to one or more of the preceding 
claims, wherein said non-authenticity messages (24,34) and/or 
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said authenticity messages (28,31) are accompanied by or fol- 
lowed by further information for said user device (13,14) or a 
user of said user device (13,14). 

11. Method according to one or more of the preceding 
claims, wherein one or more of said queries (22,30) and/or 
messages (24,28,31,34) are transmitted or received at least 
partly over a wireless data transmission network (11B) . 

12. Computer program product for verifying the au- 
thenticity of one or more goods (1), each good (1) having at 
least one associated user-exposable code (2) , in a system (10) 
comprising at least one authentication server (15) at least 
arranged to have access to unique codes for authentic goods 
and to verify said user-exposable code (2) , and at least one 
user device (13,14) connectable to said authentication server 
(15) via a data transmission network (11) , at least including 
computer executable code portions for: 

receiving one or more data-strings comprising said user- 
exposable code (2) and an exposure state of said user- 
exposable code (2) at said authentication server (15) ; 
- determining the authenticity of said good (1) in depend- 
ence on said user-exposable code (2) and said exposure 
state . 

13. Computer program product according to claim 12, 
further comprising software code portions for performing the 
method of at least one of the claims 2-6, 8 and 10. 

14. System (10) for verifying the authenticity of one 
or more goods (1) , each good (1) having at least one associ- 
ated user-exposable code (2) , comprising at least one 
authentication server (15) arranged to have access to unique 
codes for authentic goods and to verify said user-exposable 
code (2) and at least one user device (13,14) connectable to 
said authentication server (15) via a data transmission net- 
work (11) , said authentication server (15) being arranged to 
determine the authenticity of said good (1) in dependence on 
said user-exposable code (2) and said exposure state. 

15. System according to claim 14, wherein said system 
(10) further comprises a query generator (19) for providing a 
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query (30) on said user device (13,14) relating to the expo- 
sure state of said user-exposable code (2) . 

16. Authentication server (15) for verifying the au- 
thenticity of one or more goods (1) , each good (1) having at 

5 least one associated user-exposable code (2) , said authentica- 
tion server (15) being arranged to: 

receive one or more data-strings comprising said user- 
exposable code (2) and an exposure state of said user- 
exposable code (2) , and 
10 - determine the authenticity of said good (1) in dependence 

on said user-exposable code (2) and said exposure state. 

17. Authentication server (15) according to claim 16, 
wherein said authentication server (15) further comprises a 
query generator (19) arranged to provide a query (30) to said 

15 user device (13,14) relating to said exposure state of said 
user-exposable code (2) . 

18. Authentication server (15) according to claim 16 
or 17, wherein said authentication server (15) is further ar- 
ranged to transmit authenticity messages (28,31) and non- 
20 authenticity messages (24,34) to said user device (13,14). 
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